Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/59FIMrCXT_P03LWnZpXiy6CXCgQ.roa
File:                     59FIMrCXT_P03LWnZpXiy6CXCgQ.roa (raw, json)
Hash identifier:          R/4aeVormY3IghCZvXPY3i+PYfzubrWc+WnaCjmbEqg=
Subject key identifier:   E7:D1:48:32:B0:97:4F:F3:F4:DC:B5:A7:66:95:E2:CB:A0:97:0A:04
Certificate issuer:       /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial:       01928269E9BDF26AA2A0B3389F30305181A8
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/59FIMrCXT_P03LWnZpXiy6CXCgQ.roa
Signing time:             Sat 12 Oct 2024 20:27:12 +0000
ROA not before:           Sat 12 Oct 2024 20:27:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a0e:7f42::/32 maxlen: 32
                          2a0e:7f43::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 19:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:82:69:e9:bd:f2:6a:a2:a0:b3:38:9f:30:30:51:81:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
        Validity
            Not Before: Oct 12 20:27:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e7d14832b0974ff3f4dcb5a76695e2cba0970a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:b3:18:8e:f0:59:a0:cc:92:d2:70:89:b4:
                    99:79:2d:75:d1:40:55:6a:a4:9b:a5:e6:b7:4f:2e:
                    16:24:da:fb:1e:b1:e8:98:0a:1b:59:71:c1:bd:d9:
                    04:a4:85:8d:04:7b:32:f4:c5:dd:5b:64:d9:18:f9:
                    21:4e:8f:a9:78:e6:4f:e5:fa:80:c6:33:0e:56:96:
                    37:3f:ff:65:88:31:7e:35:0e:2a:f6:b5:8a:3e:9a:
                    16:b1:1b:28:70:2d:89:8e:b7:ab:3d:58:f4:b0:2e:
                    98:d7:d8:a6:f3:04:99:d4:26:07:dd:30:f5:5b:1a:
                    5f:d3:8e:ac:70:6f:8f:dc:d2:2f:12:fd:c4:a5:26:
                    21:61:22:dd:ab:3f:33:65:4e:58:0b:46:42:ea:b2:
                    c9:f1:8a:84:57:91:1f:16:44:a5:32:8d:20:c3:69:
                    07:37:9e:41:2b:42:84:5b:9f:31:14:f7:4b:14:31:
                    85:66:30:5e:fb:08:9a:92:e7:88:ef:f7:be:21:64:
                    59:2f:9b:e1:c7:1c:e2:95:c9:9f:f7:2d:a6:f3:0e:
                    97:d8:71:fc:c3:ea:72:e3:1e:c0:e9:9c:85:ab:13:
                    14:1a:10:b0:88:e7:65:5a:3b:22:6b:9e:ef:f8:5e:
                    d5:ec:6a:e0:9f:62:47:c3:44:57:ee:64:31:fd:90:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:48:32:B0:97:4F:F3:F4:DC:B5:A7:66:95:E2:CB:A0:97:0A:04
            X509v3 Authority Key Identifier:
                keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/59FIMrCXT_P03LWnZpXiy6CXCgQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:7f42::/31

    Signature Algorithm: sha256WithRSAEncryption
         90:41:8f:79:ae:55:40:1e:26:07:af:67:a7:95:56:67:32:60:
         e3:e3:38:11:4d:a7:d9:b3:b1:87:18:bf:5b:64:99:a5:64:0c:
         ca:11:ef:28:9d:e4:bc:e4:52:18:c9:d4:1c:db:1a:8f:69:b7:
         71:fa:b4:5c:85:12:7c:dc:dc:4e:a7:34:6a:69:b6:ca:93:5b:
         02:3a:01:fc:69:a9:9f:28:4a:78:d6:7a:e8:a3:9f:f3:a3:02:
         16:f8:0b:6c:d6:6a:d5:0a:cd:65:e3:1c:3c:e4:d7:f3:a2:96:
         00:07:94:71:8d:9c:da:5f:4f:bf:73:00:4c:7c:f4:b3:c1:25:
         fa:82:27:c2:99:0c:4e:c1:91:c4:0e:9b:2a:25:4a:9d:2c:46:
         be:ad:74:4e:7b:87:74:a2:5e:44:34:84:bd:9d:25:0c:7d:b4:
         39:f0:ba:19:f3:ae:3b:b2:d7:ff:e5:57:00:4d:8d:96:12:fe:
         cb:fd:23:b1:30:ca:52:bf:dc:97:dd:27:99:a8:ec:93:f3:ad:
         8c:f7:07:9a:61:a7:6f:f4:d4:d9:93:d7:a2:fa:cb:df:42:79:
         09:6f:be:59:37:54:51:4c:8d:1d:5e:d8:05:b7:33:17:7b:6d:
         4f:fe:38:30:c3:30:4e:07:39:44:30:c5:b3:ac:ec:59:33:bc:
         6b:e6:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----